Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.mft
File: ILpx5Gx1kWuOXeGTzH-BBp34b3M.mft (raw, json)
Hash identifier: yhCchxlzwPDHo+GIfDlnV40vkzbq2f94KKmKVuZLI44=
Subject key identifier: 04:4C:C6:6B:EF:00:3C:59:AF:B3:97:3F:D0:39:0C:FB:90:53:5F:14
Authority key identifier: 20:BA:71:E4:6C:75:91:6B:8E:5D:E1:93:CC:7F:81:06:9D:F8:6F:73
Certificate issuer: /CN=20ba71e46c75916b8e5de193cc7f81069df86f73
Certificate serial: 019511A2E8BBB99AE67868799B793A8E73E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILpx5Gx1kWuOXeGTzH-BBp34b3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.mft
Manifest number: 1157
Signing time: Mon 17 Feb 2025 02:00:43 +0000
Manifest this update: Mon 17 Feb 2025 02:00:43 +0000
Manifest next update: Tue 18 Feb 2025 02:00:43 +0000
Files and hashes: 1: ILpx5Gx1kWuOXeGTzH-BBp34b3M.crl (hash: Z2apbNx2dinrs+E/MkuuKgdRmjV8MxMArm25cAh5v8w=)
2: S_d1yxjPDAZnGSrhlxcFQsHo8B8.roa (hash: 1yCKzHKyUcb+bDJzq8H1WVPfPxnz9wCx2KQZUrXnAc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ILpx5Gx1kWuOXeGTzH-BBp34b3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:e8:bb:b9:9a:e6:78:68:79:9b:79:3a:8e:73:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20ba71e46c75916b8e5de193cc7f81069df86f73
Validity
Not Before: Feb 17 02:00:43 2025 GMT
Not After : Feb 18 02:00:43 2025 GMT
Subject: CN=044cc66bef003c59afb3973fd0390cfb90535f14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e5:3d:52:41:5c:8f:d2:6e:d5:c3:86:29:90:
3d:9d:cb:06:58:4b:e0:65:6f:07:c0:bd:ef:7f:06:
ca:d8:19:9c:55:74:06:00:f2:ac:98:6d:bf:8a:b3:
d4:7a:c3:21:67:75:cc:f2:2d:d9:92:47:a8:aa:4d:
b6:31:ad:38:5d:00:5d:b8:10:4d:ac:da:b8:3a:12:
25:77:27:e7:4b:8e:d7:53:4c:ca:ff:d0:62:36:42:
ca:bd:3d:bc:fd:05:0e:85:79:18:f2:c4:73:4a:48:
54:58:92:47:53:71:6e:e9:11:d1:50:91:aa:10:0e:
fe:f5:bf:8b:30:8c:36:c8:f8:90:46:b2:f0:ca:36:
1a:b5:02:73:b3:45:0d:77:70:d1:f7:b1:81:e7:b0:
23:89:1e:8d:73:35:51:58:fa:29:83:32:86:1e:ce:
b2:20:9a:59:10:5b:fc:0e:fa:bc:79:3b:4a:93:b7:
77:83:75:ca:6d:0c:30:09:f3:8b:4b:7a:06:45:b6:
71:be:24:95:57:68:cb:65:c7:7f:64:a7:59:09:3c:
1b:cf:ba:af:b3:40:48:af:83:29:c3:92:d6:3c:70:
03:d9:06:c8:15:36:66:97:03:16:11:03:7e:2d:9d:
b9:39:4e:1b:b9:b5:d1:26:74:48:22:33:36:93:83:
cc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:4C:C6:6B:EF:00:3C:59:AF:B3:97:3F:D0:39:0C:FB:90:53:5F:14
X509v3 Authority Key Identifier:
keyid:20:BA:71:E4:6C:75:91:6B:8E:5D:E1:93:CC:7F:81:06:9D:F8:6F:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILpx5Gx1kWuOXeGTzH-BBp34b3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:4e:a0:1c:90:8c:1b:30:13:27:39:c0:32:82:89:b7:bc:93:
0e:d3:a1:bf:c6:33:3e:c3:6b:05:36:5b:dd:07:c5:e1:a2:a3:
c9:0c:6e:07:99:a4:6b:b5:06:1c:86:49:8e:0c:ae:ea:da:fb:
22:36:67:7a:e2:7a:38:c5:eb:e7:3c:18:18:a3:d0:9b:86:72:
d6:e7:f6:bf:b7:d6:83:a1:44:ed:75:4f:d3:dc:31:53:3a:e1:
4b:6d:02:57:61:17:80:c0:4c:96:ce:17:61:84:f9:ed:22:d3:
5c:33:ab:4d:b7:5c:36:ba:ed:be:d1:e3:da:97:a5:42:02:e7:
6a:33:92:52:ad:37:4a:4e:2a:70:09:e1:6d:e9:e6:80:36:fd:
c5:a0:9c:ce:34:be:7b:4e:62:85:be:bb:57:3b:a5:1e:6d:54:
9b:f9:32:0f:3c:27:7b:ae:5d:cb:1f:a2:d4:0d:ab:5d:64:61:
89:c6:e1:f0:55:f0:0a:5a:f0:66:26:83:60:01:50:ae:36:f8:
ed:0c:11:f0:44:79:1b:e3:aa:32:5d:d9:f5:9b:1a:c7:80:f2:
1c:e0:69:7d:72:bc:bd:dd:de:1c:61:5f:04:a7:ae:7a:3e:ed:
e5:e2:93:4b:52:c6:f4:17:ef:93:e0:c9:e0:1e:ff:a8:56:4a:
90:21:33:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURoui7uZrmeGh5m3k6jnPjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwYmE3MWU0NmM3NTkxNmI4ZTVkZTE5M2NjN2Y4MTA2OWRm
ODZmNzMwHhcNMjUwMjE3MDIwMDQzWhcNMjUwMjE4MDIwMDQzWjAzMTEwLwYDVQQD
EygwNDRjYzY2YmVmMDAzYzU5YWZiMzk3M2ZkMDM5MGNmYjkwNTM1ZjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+U9UkFcj9Ju1cOGKZA9ncsGWEvg
ZW8HwL3vfwbK2BmcVXQGAPKsmG2/irPUesMhZ3XM8i3Zkkeoqk22Ma04XQBduBBN
rNq4OhIldyfnS47XU0zK/9BiNkLKvT28/QUOhXkY8sRzSkhUWJJHU3Fu6RHRUJGq
EA7+9b+LMIw2yPiQRrLwyjYatQJzs0UNd3DR97GB57AjiR6NczVRWPopgzKGHs6y
IJpZEFv8Dvq8eTtKk7d3g3XKbQwwCfOLS3oGRbZxviSVV2jLZcd/ZKdZCTwbz7qv
s0BIr4Mpw5LWPHAD2QbIFTZmlwMWEQN+LZ25OU4bubXRJnRIIjM2k4PMKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFARMxmvvADxZr7OXP9A5DPuQU18UMB8GA1UdIwQY
MBaAFCC6ceRsdZFrjl3hk8x/gQad+G9zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUxweDVHeDFrV3VPWGVHVHpILUJCcDM0YjNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9kMDY0MmMtODRlNi00MjkwLWFmYjEt
NDg0NTAwYmNmYjA3LzEvSUxweDVHeDFrV3VPWGVHVHpILUJCcDM0YjNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9kMDY0MmMtODRlNi00MjkwLWFmYjEtNDg0NTAwYmNmYjA3
LzEvSUxweDVHeDFrV3VPWGVHVHpILUJCcDM0YjNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALE6gHJCM
GzATJznAMoKJt7yTDtOhv8YzPsNrBTZb3QfF4aKjyQxuB5mka7UGHIZJjgyu6tr7
IjZneuJ6OMXr5zwYGKPQm4Zy1uf2v7fWg6FE7XVP09wxUzrhS20CV2EXgMBMls4X
YYT57SLTXDOrTbdcNrrtvtHj2pelQgLnajOSUq03Sk4qcAnhbenmgDb9xaCczjS+
e05ihb67VzulHm1Um/kyDzwne65dyx+i1A2rXWRhicbh8FXwClrwZiaDYAFQrjb4
7QwR8ER5G+OqMl3Z9Zsax4DyHOBpfXK8vd3eHGFfBKeuej7t5eKTS1LG9Bfvk+DJ
4B7/qFZKkCEzCQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:36 2025 by rpki-client